Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/9yFR0ZlyxIWFyIuR13Hz7S2BHPw.roa
File: 9yFR0ZlyxIWFyIuR13Hz7S2BHPw.roa (raw, json)
Hash identifier: YmbaO0b2/cmvptQcP7zlGdEjr8HeMhavZzEFHEW47mg=
Subject key identifier: F7:21:51:D1:99:72:C4:85:85:C8:8B:91:D7:71:F3:ED:2D:81:1C:FC
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E61E24AA0357188D8A645F6A39258D77
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/9yFR0ZlyxIWFyIuR13Hz7S2BHPw.roa
Signing time: Sun 30 Mar 2025 08:14:49 +0000
ROA not before: Sun 30 Mar 2025 08:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e6:1e:24:aa:03:57:18:8d:8a:64:5f:6a:39:25:8d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 08:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f72151d19972c48585c88b91d771f3ed2d811cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:d9:9a:83:88:f1:62:71:06:24:b1:48:f3:
4c:41:fd:75:19:08:33:56:e0:2a:82:fb:79:f3:52:
c8:cb:f3:a1:ec:77:c6:0a:db:71:f0:d4:b9:9f:2a:
ae:af:08:12:a5:d2:af:f7:46:33:6e:20:4d:e5:b6:
4f:c2:08:f1:7c:42:ff:8b:41:29:43:54:4e:65:ad:
74:a7:02:f2:2b:7f:1e:1d:4e:26:4d:32:97:9d:24:
b7:84:3b:88:56:ab:0f:d4:c3:19:ae:a1:86:b7:c4:
7e:a3:e5:03:8f:ef:3e:61:62:5d:37:9f:04:8b:0d:
b6:3d:bd:ec:ca:4c:a3:22:62:94:99:23:3b:e1:77:
52:90:4e:5d:59:73:ff:15:de:c1:d6:8b:76:59:95:
cb:8f:cd:fd:b5:c5:f9:ef:8e:bd:ed:80:cd:07:3c:
57:a2:37:2e:c8:20:05:77:57:f4:6d:16:9f:94:aa:
be:3b:0d:7c:00:70:b4:6a:c6:93:59:08:c1:c5:a8:
5d:19:89:12:db:be:f1:66:9b:3e:02:a6:e1:1b:96:
a8:41:59:5f:fa:98:66:44:2a:d5:df:6b:45:c1:42:
54:cb:36:74:33:b7:c7:ea:2e:d4:b7:43:d8:c2:3a:
16:55:1f:ae:7c:ca:81:56:d0:69:63:ad:74:26:e0:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:21:51:D1:99:72:C4:85:85:C8:8B:91:D7:71:F3:ED:2D:81:1C:FC
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/9yFR0ZlyxIWFyIuR13Hz7S2BHPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
65:7a:b2:4d:7d:68:bf:37:6f:c3:74:63:e8:ec:9d:50:10:80:
a5:94:25:54:fc:71:df:7a:f7:9b:97:21:74:be:83:ea:c1:01:
2d:fd:9b:a6:29:84:9b:49:2e:46:78:01:36:a8:81:30:4c:38:
5c:9c:81:39:d4:c1:4f:d3:cb:84:ff:ae:f9:db:0c:5e:6d:d2:
dd:90:07:1b:e9:db:ca:a9:05:b9:90:43:f7:1f:ad:b1:b9:58:
18:58:8b:4f:cb:e9:5e:c5:2f:43:b2:3c:96:76:a3:35:87:5e:
04:ab:0c:54:c6:90:f6:24:43:52:db:8e:db:1a:56:71:23:b8:
8f:95:04:07:2d:8e:2c:6a:c3:3d:b5:44:1c:bc:f3:95:43:af:
84:f8:60:a6:69:75:59:50:9c:92:07:8b:63:f8:5d:4d:4d:0a:
03:1a:c2:06:ba:77:be:95:de:67:0a:2d:f6:48:a9:8d:84:f0:
88:00:fb:97:1f:d0:c4:1d:c7:d2:13:c8:b0:ae:e6:c8:d3:57:
80:f2:a3:df:e2:4c:30:58:57:d0:0d:af:82:8e:50:b2:b6:5b:
da:29:71:c1:d8:ea:bb:0b:f9:18:7e:67:81:00:5d:d0:0e:cc:
f0:80:ce:af:7b:cd:aa:26:e0:9d:19:4c:71:aa:fe:cf:37:54:
84:fd:d3:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:17:28 2025 by rpki-client